VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Mar 10, 2026· Updated Jun 17, 2026

CVE-2026-30954

CVE-2026-30954

Description

LinkAce is a self-hosted archive to collect website links. In 2.1.0 and earlier, the processTaxonomy() method in LinkRepository.php allows authenticated users to attach other users' private tags and lists to their own links by passing integer IDs.

Affected products

3
  • Linkace/Linkacev53 versions
    <= 2.1.0+ 2 more
    • (no CPE)range: <= 2.1.0
    • (no CPE)range: <=2.1.0
    • cpe:2.3:a:linkace:linkace:*:*:*:*:*:*:*:*range: <=2.1.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.